[AAASM-5520] ♻️ (docs): Generate canonical contacts from registry - #304
Merged
Conversation
Add scripts/check_contact_metadata.py: a precise single-field sync/audit that pins the canonical .com contact facts from ai-agent-assembly/.github's registry.json (recorded commit + blob) and validates pyproject.toml's author email and SECURITY.md's generated contact region against them, failing closed. Add a blocking CI drift gate. States intent only — never claims .com is live-sending. Refs AAASM-5520 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Migrate [project].authors email from the legacy team@agent-assembly.dev to the canonical team@agent-assembly.com via the precise field sync. Every other byte of the manifest is preserved. Refs AAASM-5520 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Wrap the reporting address in a BEGIN/END GENERATED region rendered from the pinned registry: canonical security@agent-assembly.com, structured SLAs, and a labeled legacy-.dev alias note (Cloudflare Email Routing during transition). Refs AAASM-5520 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.



Jira Ticket
Summary
Consumer rollout of the canonical contact registry (AAASM-5519). Migrates this repo's hand-copied contact literals to the canonical
.comaddresses via a precise field sync/check — no manifest regeneration.Completable now and done here: contact sync + drift gate. Not yet true (and not claimed):
.comlive-sending — the SECURITY.md note says the legacy.devaddress still delivers via Cloudflare Email Routing during the transition.Changes
scripts/check_contact_metadata.py— pins canonical.comfacts fromai-agent-assembly/.githubregistry.json(recorded commit14db28d, blobaf1e384); syncs/auditspyproject.toml's[project].authorsemail and SECURITY.md's generatedsecurity_contactregion; fails closed.pyproject.toml— author emailteam@agent-assembly.dev→team@agent-assembly.com(single field; all other bytes preserved).SECURITY.md—<!-- BEGIN/END GENERATED: security_contact -->region: canonicalsecurity@agent-assembly.com, structured SLAs, labeled legacy-.devnote. Repo-specific supply-chain / package-name / attestation prose untouched..github/workflows/contact-metadata-check.yml— blocking--checkgate.Cross-repo distribution
Pinned to a recorded
.githubcommit (network-free, reproducible, fail-closed). Re-pin is an explicit reviewed change.Scan note
examples/basic_usage.py:12usesgateway.agent-assembly.dev— a gateway URL host in example code, not a contact address (ADR 0007/0008 URL contract). Out of this ticket's contact scope; flagged for a URL-migration ticket in the primary PR's scan report.Related AAASM-5520 PRs
Validation
python scripts/check_contact_metadata.py --check→ exit 0 (idempotent)pyproject.tomlReview focus
pyproject.tomlsingle-field sync..com-live claim).🤖 Generated with Claude Code